Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 12 discussion

https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-saas.html

I go with A

Use AWS PrivateLink to connect securely and privately to the SaaS app without traversing the internet -- with fine-grained security group control to maintain least privilege.

Access Saas products throgh AWS Private Link is the answer.

Create an AWS PrivateLink interface VPC endpoint.

it s a

It's A because in this scenario we are consuming a service , not providing one, so that eliminates E .

Answer - A. VPC Interface end point to access any service privately without traversing the internet. AWS Private Link VPC endpoint to access the SaaS application.

Option A - The interface VPC Endpoint will provide local access to the SaaS service from within the company's VPC. Moreover, traffic to and access from the SaaS VPC will traverse the AWS network rather than the internet. This is considered private traffic. Option B - This option might not work: Nothing is said about whether the CIDR blocks in each VPC overlap. Moreover, nothing is said about whether bandwidth limitations on Site-Site VPN could be an issue. Option C - This option might not work: Nothing is said about whether the CIDR blocks in each VPC overlap. Option D - This option will not work: A PrivateLink Endpoint service is used for facilitating access to AWS services.

A, the service provider creates an endpoint service and grants their customers access to the endpoint service. As the service consumer, you create an interface VPC endpoint, which establishes connections between one or more subnets in your VPC and the endpoint service.

A. Create an AWS PrivateLink interface VPC endpoint. Connect this endpoint to the endpoint service that the third-party SaaS application provides. Create a security group to limit the access to the endpoint. Associate the security group with the endpoint.

obvious

Correct Answer : A

A VS D A. Create an AWS PrivateLink interface VPC endpoint. Connect this endpoint to the endpoint service that the third-party SaaS application provides. D. Create an AWS PrivateLink endpoint service. Ask the third-party SaaS provider to create an interface VPC endpoint for this endpoint service D is right SaaS provider has create interface VPC endpoint for this endpoint service

https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-saas.html https://aws.amazon.com/blogs/apn/enabling-new-saas-strategies-with-aws-privatelink/

Create an AWS PrivateLink interface VPC endpoint.

https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-saas.html